IT Security News Daily Summary 2022-04-01

• Report: One in four employees who made security mistakes lost their job

• Blockchain can power up government processes, GAO says

• Login.gov plans to scale up without facial recognition tech – for now

• New Subscription: Learn Fundamentals

• Agencies can accelerate AI deployments with ModelOps

• Apple Releases Security Updates

• Apple releases macOS 12.3.1, iOS 15.4.1, watchOS 8.5.1 and more

• How safe are your crypto assets?

• This Week in Security News – April 1, 2022

• New bill takes aim at veterans records backlog

• FBI urges local agencies to prepare for ransomware attacks

• NSA Employee Indicted for Sending Classified Data Outside the Agency

• GitLab issues critical update after hard-coding passwords into accounts

• Spring Releases Security Updates Addressing “Spring4Shell” and Spring Cloud Function Vulnerabilities

• Update now! Apple patches two zero-day vulnerabilities that may have been actively exploited

• Globant suffers network breach due to LAPSUS$ compromise

• Hive ransomware impacts California non-profit health organisation

• Only a transformation of service delivery can rebuild trust in government. Here’s how.

• The benefits of digital payments automation for local government

• Google survey suggests government workers dissatisfied with legacy software, concerned over cyberattacks

• House Passes Better Cybercrime Metrics Act

• Public.Resource.Org Can Keep Freeing the Law: Court Allows Posting Public Laws And Regulations Online

• Two teenagers charged in connection with investigation into hacking group, says City of London police

• What You Need to Know About PCI DSS 4.0’s New Requirements

• FBI Warns Election Officials of Credential Phishing Attacks

• Experts Warn Defenders: Don’t Relax on Log4j

• New Spear Phishing Campaign Targets Russian Dissidents

• Log4Shell is Employed in 31% of Malware infections, Lacework Labs Identifies

• 82% Applications in Public Sector Have Security Flaws

• Spring4Shell vulnerability: Should you patch?

• US Cyber Command Partners with APUS

• NSA Employee Accused of Sharing National Defense Secrets

• CERT/CC Releases Information on Spring4Shell Vulnerability

• JupyterLab Web Notebooks Targeted by Unique Python-Based Ransomware

• New AcidRain malware hit Viasat’s modems downing Ukraine’s internet

• Generosity Beware: Protecting Your Organization and Its Members From Cyber Theft

• tru.ID Adds Sorenson Ventures to $9m Seed Round to Scale the Mobile Cybersecurity Platform

• What Concerns Cyber Pros Most About the Invasion of Ukraine

• Zimperium acquired by Liberty Strategic Capital for $525M

• Report: Facebook Has Failed To Label 80 Percent Of Posts Promoting Russian Conspiracy Theory

• Modem-wiping malware was behind Viasat cyberattack

• Best VPN for Windows PC (2022)

• More Charged In UK Lapsus$ Investigation

• Apple Rushes Out Patches For Two Zero Days Threatening Users

• Deep Panda Returns With Log4Shell Exploits, New Fire Chili Rootkit

• Ubiquiti Sues Brian Krebs Alleging Defamation

• Ukraine Accuses Russia Of Using WhatsApp Bot Farm To Ask Military To Surrender

• Report: 84% of enterprises struggle to manage their endpoint security

• Anonymous targets oligarchs’ Russian businesses: Marathon Group hacked

• 5G edge and security deployment evolution, trends and insights

• Viasat’s Satellite Modems Wiped

• FBI Warns of Ransomware Attacks Targeting Local Governments

• More Than Ever, Security Matters

• Russian Wiper Malware Likely Behind Recent Cyberattack on Viasat KA-SAT Modems

• An In-Depth Look at ICS Vulnerabilities Part 1

• Russian Bailiffs Seize $12m From Google – Report

• More charged in UK Lapsus$ investigation

• Russian Wiper Malware Responsible for Recent Cyberattack on Viasat KA-SAT Modems

• AcidRain, a wiper that crippled routers and modems in Europe

• Results overview: 2022 MITRE ATT&CK Evaluation – Wizard Spider and Sandworm edition

• SunVia bets that controlling your own identity will make the metaverse successful

• Chinese hackers Deep Panda return with Log4Shell exploits, new Fire Chili rootkit

• FBI: Ransomware attacks are piling up the pressure on public services

• Cybersecurity survival tips for small businesses: 2022 edition

• Apple Rushes Out Patches for 0-Days in MacOS, iOS

• PCI Data Security Standard v4.0 Released to Address Emerging Threats

• What Is S/MIME?

• BlackGuard, a New Info-Stealer, for Sale on Russian Hacking Forums

• CISA Cautions of Attacks on UPS Devices

• Critical Bugs in Rockwell PLC Could Allow Hackers to Implant Malicious Code

• Russia Bans Acquisition Of Foreign Software For Critical Infrastructure

• Zyxel urges customers to patch critical firewall bypass vulnerability

• Is it OK to use text messages for 2-factor authentication? [Ask ZDNet]

• New Vulnerabilities Allow Stuxnet-Style Attacks Against Rockwell PLCs

• Russia Inches Toward Its Splinternet Dream

• Bypassing Two-Factor Authentication

• 2022-03-29 – Emotet E4 with Cobalt Strike

• Government workers rely on Microsoft. That could be a security problem, Google claims

• Trend Micro Patches Apex Central Zero-Day Exploited in Targeted Attacks

• Results Overview: 2022 MITRE ATT&CK Evaluation – Wizard Spider and Sandworm Edition

• Chinese Hackers Target VMware Horizon Servers with Log4Shell to Deploy Rootkit

• Security Experts On PCI DSS 4.0 Released

• Experts Insight On Spring4Shell Vulnerability

• UK spy chief praises fake news counter cell

• Majority of data security incidents caused by insiders

• Deep Panda Hacking Group Is Targeting VMware Horizon Servers

• JupyterLab’s Web Notebooks Hit Clipped Emergent Python-based Ransomware Strain

• Samsung Begins Self-Repair Program For Galaxy Devices

• The spectre of Stuxnet: CISA issues alert on Rockwell Automation ICS vulnerabilities

• Antimatter Emerges From Stealth Mode With $12M to Secure Customer Data

• Spring4Shell Exploitation Attempts Confirmed as Patches Are Released

• North Korean Hackers Distributing Trojanized DeFi Wallet Apps to Steal Victims’ Crypto

• Apple And Meta Shared Data With Hackers – Experts Reactioins

• Privilege Elevation and Delegation Management Explained: Definition, Benefits and More

• Google: Russian credential thieves target NATO, Eastern European military

• DDoS Protection Tips

• Cyber Threat warning issued to all internet connected UPS devices

• UK Spy Chief Hails Government Cell Tackling Kremlin Fake News

• Zyxel fixes a critical bug in its business firewall and VPN devices

• Over Half of Data Security Incidents Caused by Insiders

• UK Spy Chief Warns Russia Looking for Cyber Targets

• IT Services Giant Admits $42m Fallout from Ransomware Attack

• Tech Mentorships | Avast

• CISA adds Sophos firewall bug to Known Exploited Vulnerabilities Catalog

• New UK Study Shows Just 1/3rd Of Orgs Use MFA Auth, Practice Cyber Compliance

• Organizations need to up their cloud native security strategy

• Modem-wiping malware caused Viasat satellite broadband outage in Europe

• Weekly Update 289

• Spring4Shell: New info and fixes (CVE-2022-22965)

• Modem-wiping malware caused Viasat satellite broadband outage

• Defending the endpoint with AI

• Flaws in Wyze cam devices allow their complete takeover

• National Security Agency employee indicted for ‘leaking top secret info’

• Zyxel Releases Patches for Critical Bug Affecting Business Firewall and VPN Devices

• Does Cyber Risk Quantification Work? | Avast

• National Security Agency employee indicted for leaking top secret info

• JavaScript security: The importance of prioritizing the client side

• We need an industry-backed, tech-neutral resource to restore trust in voice communications

• New infosec products of the week: April 1, 2022

• Australia’s SkyGuardian drones shot down by spicy cybers

• Cloud native application security is a critical priority, risk perception is worryingly low

• Making security mistakes may come with a high price for employees

• MITRE Engenuity ATT&CK® Evaluations Announces Results from Fourth Round of Enterprise Evaluations

• Deep Instinct Shows a 100% Prevention Score in the 2022 MITRE Engenuity ATT&CK® Evaluations for Enterprise

• New Study Exposes Behaviors of Government Employees That Could Lead to Cybersecurity Breaches

• TD SYNNEX Achieves AWS Cloud Management Tools Competency

• Ransomware Study: 4 out of 5 Organizations Targeted Within The Past 12 Months

• Apple updates macOS, iOS, and iPadOS to fix possibly exploited zero-day flaws

• Is IT ready for the metaverse? If not, it should be

• MITRE ATT&CK® Evaluation results: Malwarebytes’ efficiency, delivered simply, earns high marks

• ASEGURE SUS CONFIGURACIONES CON EL GESTOR DE CONFIGURACIÓN DE TRIPWIRE

• Out of Band (OOB) Data Exfiltration via DNS

• 5G in defense market to reach $8,952.30 million by 2027

• Apple Issues Patches for 2 Actively Exploited Zero-Days in iPhone, iPad and Mac Devices

• ‘Marvel superpower’: Home Affairs wants industry to rely on its cyber powers more often

• Accops BioAuth helps businesses prevent authentication-related attacks

• Absolute announces new products to optimize and secure work-from-anywhere environments

• Obsidian Security’s session hijacking feature prevents attackers from stealing tokens

• SnapAttack Community Edition provides access to a vast library of attack and detection content

• CYTRACOM ControlOne empowers MSPs to secure modern cloud networks

• Anonymous targets Western companies still doing business in Russia

• Increasing Representation of Women in Security Research

• Apple pushes out two emergency 0-day updates – get ’em now!

• PCI Pal collaborates with Five9 to provide secure payments for customers

• Fusion Risk Management partners with UCF to help organizations navigate regulatory requirements

• Palo Alto Networks launches firewall service for AWS to protect enterprises from cyberattacks

• Dream Job Alert: EFF Seeks a Lawyer with Patent and Copyright Experience

• Google Cloud security survey is ‘aggressive’ move vs. Microsoft

• Spring Framework vulnerabilities sow confusion, concern

• Intel acquires Granulate to maximize compute workload performance for data center customers

• Continental selects Everbridge to improve enterprise resilience

• Gartner lists seven cybersecurity trends for 2022

• Fake Emergency Search Warrants Draw Scrutiny from Capitol Hill

• Vulnerabilities in Rockwell Automation PLCs Could Enable Stuxnet-Like Attacks

• Maximus names Tim Meyers as VP of Federal Cybersecurity

• MITRE promotes Stephen Kirin to VP of Enterprise Operations

• Island appoints Ellen Roeckl as CMO

• Reciprocity names Michael Maggio as CEO

• API Security Weekly: Issue 160

• Phishing scam targets election officials, FBI warns

• Keepit opens two data centers in Canda

• Jim Routh joins ADI Association Board of Directors

• ID.me appoints Anand Mehta as CPO

• Impinj hires Christina Balam as VP of Human Resources

• Vulnerability Discovered in Java Spring Framework. Check Point Customers using CloudGuard AppSec preemptive protection are fully protected from Spring4Shell Attacks

• Google surveys feds in fight with Microsoft for government market

• Apple emits macOS, iOS, iPadOS patches for ‘exploited’ security bugs

• IT Security News Monthly Summary – April

• IT Security News Daily Summary 2022-03-31

• authentication server

• As digital life gets cloudy, effective backups clear the sky for business continuity

• Air Force software factory looks to unleash ‘chaos’ on civilian IT shops

• Ransomware: Should Companies Ever Pay Up?

• Royal Enfield – 420,873 breached accounts

• SSA seeks $2.4B in IT funding and looks ahead after 5-year modernization plan

• Global BEC Crackdown Nets 65 Suspects

• Is Increased Remote Working Fueling a Cybersecurity Crisis?

• US Levels Fresh Sanctions At Russia, Targetting Tech

• The two sides of the crypto coin in the Russia-Ukraine war

• Robocalls prompt states to join feds in crackdown

• Linux secure networking security bug found and fixed

• Apple Ships Emergency Patches for ‘Actively Exploited’ macOS, iOS Flaws

• Apple issues emergency patches to fix actively exploited zero-days

• Microsoft protects against human-operated ransomware across the full attack chain in the 2022 MITRE Engenuity ATT&CK® Evaluations

• Former Pentagon no. 2 named head of defense industry group

• Report reveals surveillance abuses in educational technology

• New ‘AcidRain’ malware may be connected to Viasat attack

• Phishers make a date with your calendar apps

• AV shuttles drive wider transit options

• Criminal justice algorithms: Being race-neutral doesn’t mean race-blind

• Complete Guide to Phishing Attacks: What Are the Different Types and Defenses?

• Colombian ISPs Show Steady Commitments to User Privacy But Key Transparency Gaps Remain

• Tech support scam campaign targets Japanese visitors to PornHub

• Google tests its Privacy Sandbox and unveils new user controls

• Don’t ignore Spring4Shell. But there’s still no sign it’s widespread

• Belarusian ‘Ghostwriter’ Actor Picks Up BitB for Ukraine-Related Attacks

• New Modem Wiper Malware May be Connected to Viasat Hack

• CISA Releases Security Advisories for Rockwell Automation Products

• New in SecureX: Device Insights

• Hackers Pushed Mars Stealer Malware via OpenOffice Ads on Google

• White House Announces Possible Rise in Cyberattacks—What You Can Do to Stay Safe

• SentinelLabs: New Modem Wiper Malware May be Connected to Viasat Hack

• U.S. Cyber Command Adds APUS as Member in Newly Formed Academic Network

• Imperva Protects from New Spring Framework Zero-Day Vulnerabilities

• March 2022 Web Server Survey

• Mozilla unveils vision for web evolution

• Two different “VMware Spring” bugs at large – we cut through the confusion

• CISA Adds Eight Known Exploited Vulnerabilities to Catalog

• FBI Releases PIN on Ransomware Straining Local Governments and Public Services

• 3 strategies to launch an effective data governance plan

• Ukraine Leaks Personal Details of 620 Alleged FSB Agents

• The Chatter Podcast: Ethical Space Exploration with Lucianne Walkowicz

• 7 ways to defend against a credential stuffing attack

• Senate AI data bill gets House counterpart

• Skiff Banks $10.5M for E2E Encrypted Workplace Collaboration

• Why CISOs need to understand the business

• The importance of HR’s role in cybersecurity

• CISA Issues UPS Warning

• Nvidia DGX Systems Prone To Side Channel, Covert Attacks

• QNAP Customers Adrift, Waiting On Fix For OpenSSL Bug

• FBI Efforts To Disrupt Business Email Compromise Scams Leads To 65 Arrests

• Are Tech Companies Removing Evidence Of War Crimes?

• RCE Spring4shell Hits Java Spring Framework

• ‘We’re seeing about a thousand vulnerabilities patched by Microsoft each year,’ says SentinelOne’s Weingarten

• Summary of March Inside (ISC)2 Webinar: Stay Vigilant

• US Federal Agencies Warn of Cyber Attacks Targeting UPS Devices

• Biden’s new Cybersecurity legislation is unrealistic says study

• MEDIA ALERT: Anomali Announces eXtends Virtual Event, Showcasing How Organizations Can Leverage The Anomali Platform and Cloud-Native XDR Solution to Stop Attackers and Their Breaches

• The OpenNMS Group Releases OpenNMS Meridian 2022 with Enhanced Network Monitoring and Security Capabilities

• SnapAttack Launches Community Edition to Drive Collaboration Across Cybersecurity Community

• CrowdStrike to Host Investor Briefing

• Tech Most Favoured Sector Amid ‘Great Resignation’

• Dyson’s First Wearable Is Air-Purifying Headphone Device

• Security ROI: Time & Resource Savings for IR/SOC Teams

• Nvidia is bringing zero trust security into data centers

• FBI efforts to disrupt business email compromise scams leads to 65 arrests

• Meet BlackGuard: a new infostealer peddled on Russian hacker forums

• WATCH: Fireside Chat With McDonald’s CISO Shaun Marion

• Australian Government to Invest $9.9bn in Cyber

• Cyber-attack on California Healthcare Organization

• New Version of PCI DSS Designed to Tackle Emerging Payment Threats

• Security Patch Releases for Critical Zero-Day Bug in Java Spring Framework

• Social Engineering Remains Key Tradecraft for Iranian APTs

• Ransomware Enforcement Operations in 2020 and 2021

• URI spoofing flaw could phish WhatsApp, Signal, Instagram, and iMessage users

• Ukraine War: Major Internet Provider Suffers Cyber-Attack

• US Privately Warned Businesses About Kaspersky, Day After Invasion

• Automaker Cybersecurity Lagging Behind Tech Adoption, Experts Warn

• Patch now: RCE Spring4shell hits Java Spring framework

• Cybersecurity Vendors Assessing Impact of Recent OpenSSL Vulnerability

• D.C. Circuit Rules That Public Health Law Empowers Government to Expel Asylum-Seekers—But Not to Countries Where They Face Persecution or Torture

• For Three Years, the Flaws in Wyze Cam Devices Have Gone Unpatched

• Why remote browser isolation is core to zero-trust security

• S3 Ep76: Deadbolt, LAPSUS$, Zlib, and a Chrome 0-day [Podcast]

• Protecting Your Organization Against a New Class of Cyber Threats: HEAT

• Google TAG details cyber activity with regard to the invasion of Ukraine

• 57% of people can’t recall if they ever backed up their important documents

• National Emergency in the United States Prolonged

• Nvidia DGX systems prone to side channel, covert attacks

• QNAP Customers Adrift, Waiting on Fix for OpenSSL Bug

• FBI: 65 People Arrested Worldwide in BEC Bust

• Nation-State Hackers Ramp Up Ukraine War-Themed Attacks

• Hackers Increasingly Using ‘Browser in a Browser’ Technique in Ukraine Related Attacks

• New Python-based Ransomware Targeting JupyterLab Web Notebooks

• Bugs in Wyze Cams Could Let Attackers Takeover Devices and Access Video Feeds

• Lazarus Trojanized DeFi app for delivering malware

• The National Emergency in the United States Has Been Prolonged

• 2022 Banking & Finance Security Intelligence Roundup

• A Blockchain Primer and a Bored Ape Headscratcher – Podcast

• The Importance of Open Source to an XDR Architecture

• IT Giant Globant Confirms Source Code Repository Breach

• 10 Best Monitors Under $400 2022 – Top Budget-Friendly Picks

• EU To Optimise Its Antitrust Rules – Report

• Cybersecurity managers with a direct line to executive boards set the tone for investment: study

• Google: Multiple hacking groups are using the war in Ukraine as a lure in phishing attempts

• It’s World Backup Day! Here’s How You Can Preserve Your Files

• FBI Warns of Phishing Attacks Targeting US Election Officials

• SaaS Security Startup Wing Emerges From Stealth With $26 Million in Funding

• The Total Economic Impact™ of Cisco Secure Firewall

• The 5 dimensions of security resilience

• Anonymous hacked Russian Thozis Corp, but denies attacks on Rosaviatsia

• Fraudulent Calls From Alleged Europol Employees | Avast

• The Last Cell Tower in Mariupol

• The Total Economic Impact™ of Cisco Secure Firewall

• Chrome Zero-Day from North Korea

• NATO Countries Targeted in Russian Phishing Attacks, Google Reports

• Microsoft: These are the Windows Update policies you should set for your PCs (and rollercoasters)

• Singapore, US expand bilateral economic cooperation to include AI governance

• Spring4Shell: Spring Flaws Lead to Confusion, Concerns of New Log4Shell-Like Threat

• The Total Economic Impact™ of Cisco Secure Firewall

• Spring4Shell: No need to panic, but mitigations are advised

• Crypto Hackers Steal $615m From Ronin Network

• Fraudulent Calls From alleged Europol Employees | Avast

• Hackers Got User Data From Meta With Forged Request

• The Total Economic Impact™ of Cisco Secure Firewall

• 820,000 NYC students have their personal data exposed

• Universal Control Comes to macOS Monterey – Intego Mac Podcast Episode 233

• Russian cyber attack on US mobile customers

• Lapsus$ ransomware group strikes software firm Globant

• Globant admits to data breach after Lapsus$ releases source code

• A Few Clicks from Data Disaster: The State of Enterprise Security

• The Total Economic Impact™ of Cisco Secure Firewall

• IT and Software Consultancy Company Globant Got Hacked

• Ukraine shuts down disinformation bot farm

• Expect ‘long tail of cyber retaliation’ from Russia for sanctions, says ExtraHop CEO

• Satellite Modems Nexus of Worst Cyberattack of Ukraine War

• The Total Economic Impact™ of Cisco Secure Firewall

• NHS 111 urgent care provider leads the way in secure and flexible workforce identity and access management with My1Login

• Unpatched SpringShell bug threatens web app security

• Hackers Posing as Police Convinced Apple and Meta to Share Basic Subscriber Info

• No Patch Available Yet for Critical SpringShell Bug

• The Total Economic Impact™ of Cisco Secure Firewall

• Mysterious disclosure of a zero-day RCE flaw Spring4Shell in Spring

• Viasat: Denial of Service Attack Impacted Tens of Thousands

• Global Police Arrest 65 in Multimillion-Dollar BEC Bust

• The Total Economic Impact™ of Cisco Secure Firewall

• Cyber resiliency is top proactive priority for organizations

• Most companies don’t have a mature CLM program in place

• The Total Economic Impact™ of Cisco Secure Firewall

• Google Chrome 100 Released – Security Fixes, New Logo & More

• The Total Economic Impact™ of Cisco Secure Firewall

• Bad OPSEC allowed researchers to uncover Mars stealer operation

• The Total Economic Impact™ of Cisco Secure Firewall

• The Total Economic Impact™ of Cisco Secure Firewall

• The current state of enterprise backup and recovery

• Cryptomining groups fight fiercely for cloud resources

• Spring4Shell vulnerability likely to affect real-world apps, analyst says

• Unpatched Java Spring Framework 0-Day RCE Bug Threatens Enterprise Web Apps Security

• The Total Economic Impact™ of Cisco Secure Firewall

• Where should companies start when it comes to device security?

• The Total Economic Impact™ of Cisco Secure Firewall

• Lack of CLM maturity is putting organizations at risk

• The Total Economic Impact™ of Cisco Secure Firewall

• DDoS attacks becoming larger and more complex, finance most targeted sector

• The Total Economic Impact™ of Cisco Secure Firewall

• Deploying pseudonymization techniques to protect health data

• Island Names Ellen Roeckl as Chief Marketing Officer

• Additional Budget funds for AFP to be used for deploying ‘hacking’ Bill warrants

• Australia’s second tranche of cyber laws passes both Houses

• UK spy boss warns China hopes Russia will help it take over tech standards

• QNAP Warns of OpenSSL Infinite Loop Vulnerability Affecting NAS Devices

• The Total Economic Impact™ of Cisco Secure Firewall

• Why do organizations need to prioritize cyber resiliency?

• QNAP Warns of OpenSSL Infinite Loop Vulnerability Affecting NAS Device

• The Total Economic Impact™ of Cisco Secure Firewall

• BYOD and enterprise mobility market to reach $157.3 billion by 2026

• The Total Economic Impact™ of Cisco Secure Firewall

• Russia, Iran, Saudi Arabia are top sources of online misinformation

• Russia, Iran and Saudi Arabia are top sources of online misinformation

• The Total Economic Impact™ of Cisco Secure Firewall

• SEON unveils product updates to help customers battle online fraud

• Veriff launches HR identity verification solution to reduce friction in hiring and recruiting

• MetricStream Danube enables organizations to quantify risk in monetary terms

• The Total Economic Impact™ of Cisco Secure Firewall

• EfficientIP SOLIDserver 8.1 allows organizations to simplify and automate their cloud management

• Banyan Security Team Edition provides zero trust access to hosted apps and infrastructure services

• Yale finance director stole $40m in computers to resell on the sly

• The Total Economic Impact™ of Cisco Secure Firewall

• HID Global OMNIKEY Secure Element enhances security for organizations

• The Total Economic Impact™ of Cisco Secure Firewall

• The Total Economic Impact™ of Cisco Secure Firewall

• The Total Economic Impact™ of Cisco Secure Firewall

• SimSpace collaborates with (ISC)² to help cyber security professionals advance their knowledge

Generated on 2022-04-01 23:55:34.391295